Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/9psMC65UTPFbJE1E6kdx3wB8BQY.roa
File: 9psMC65UTPFbJE1E6kdx3wB8BQY.roa (raw, json)
Hash identifier: ZCHK74tEX7hwqTJUe2KBYzYPZhtNMCYQdyHVDWP9j24=
Subject key identifier: F6:9B:0C:0B:AE:54:4C:F1:5B:24:4D:44:EA:47:71:DF:00:7C:05:06
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0467D1
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/9psMC65UTPFbJE1E6kdx3wB8BQY.roa
Signing time: Tue 11 Jan 2022 11:25:20 +0000
ROA not before: Tue 11 Jan 2022 11:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16376
IP address blocks: 185.105.64.0/23 maxlen: 24
185.105.66.0/23 maxlen: 24
2a09:fd40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288721 (0x467d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jan 11 11:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f69b0c0bae544cf15b244d44ea4771df007c0506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:f8:e0:a6:2b:db:b5:23:ea:fb:f7:64:fc:
9a:f0:1a:ab:3b:74:f0:3b:81:99:7c:3f:8f:9b:ae:
42:a6:66:b8:cd:ea:28:12:b0:8f:a2:cd:9d:7f:7e:
5c:bc:de:7d:28:75:14:6c:54:3a:eb:ba:04:dc:2d:
4d:ec:39:30:4e:5f:e1:a5:e1:e1:6d:45:18:98:88:
5d:d3:99:c9:6d:e4:db:13:82:04:29:5e:b8:70:42:
3b:49:be:1d:33:fa:f3:c2:05:cf:4b:a9:f3:9d:73:
e7:01:b9:8b:11:cd:0e:2a:74:a8:50:27:07:cf:46:
a0:41:c9:e6:1c:a6:8e:18:e1:0c:b8:20:d5:04:58:
ff:59:58:ba:c6:ef:9d:17:43:77:f8:7f:34:5f:79:
d3:3e:77:f5:ba:3e:04:06:59:e6:ec:74:1b:55:39:
02:26:34:f3:32:14:eb:6a:52:63:47:45:e2:ef:42:
0b:d7:a3:f1:52:c0:5f:e9:71:3e:64:a5:05:76:67:
95:be:65:19:5f:c2:64:35:4e:3f:9c:88:48:85:0f:
ee:37:8b:49:91:2b:5c:46:c3:86:13:c0:4e:be:3e:
7e:7c:e9:96:c5:6c:db:d6:27:b7:9a:ee:13:24:33:
d0:0a:2d:ac:04:7c:b0:9c:d2:e6:a6:9c:da:60:81:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:0C:0B:AE:54:4C:F1:5B:24:4D:44:EA:47:71:DF:00:7C:05:06
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/9psMC65UTPFbJE1E6kdx3wB8BQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.64.0/22
IPv6:
2a09:fd40::/48
Signature Algorithm: sha256WithRSAEncryption
27:3e:37:8d:8e:4a:12:ba:db:21:4a:49:fb:a0:95:33:c3:c1:
1c:68:4f:df:c3:29:e4:ad:9d:65:09:9b:c7:48:c2:ac:67:36:
eb:bd:13:7f:b5:a9:4d:f0:d8:92:22:3c:2d:8e:03:a3:77:91:
72:37:3a:93:51:83:e9:83:2e:1f:e4:5d:17:dd:a0:d8:35:65:
a1:8e:3b:8c:50:9d:91:8e:ce:77:fb:a5:62:73:59:8e:d9:07:
b2:d3:a5:2e:e9:7d:d4:42:15:94:8e:82:6f:6c:04:69:fa:a3:
43:b0:eb:71:ba:ed:cb:cc:73:ee:5e:c3:ac:da:c0:2c:8c:9a:
7c:e2:c0:92:7b:d7:16:7f:69:f4:9a:cb:0d:46:b1:6f:ca:2d:
37:aa:e1:c1:b3:59:a4:a3:34:4e:4f:03:93:c8:25:29:b4:3f:
05:02:70:23:a0:91:a0:55:d2:73:1e:d1:3a:80:5e:9e:cd:9e:
65:1b:ed:25:84:cc:41:a3:39:d6:68:20:3b:9a:4c:a1:79:62:
51:4e:35:1d:f8:5d:4d:1d:97:74:82:7b:cb:ff:a7:76:ea:34:
47:0c:e1:3e:1b:cf:46:b1:9b:6e:5d:f4:b5:0b:cb:09:38:97:
57:a2:e6:6a:ca:7c:f2:7a:80:c5:6b:b7:a4:66:c2:a4:0a:94:
26:e6:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:08 2024 by rpki-client on console-fra.rpki-client.org